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Claims 

What is claimed is: 



1 1 . A core product load manifest for protecting ongoing system 

2 integrity of a software product having a plurality of pieces; said core product 

3 load manifest comprising: 

4 a manifest header including header attributes of the software product; 

5 a list including a plurality of manifest items stored with said manifest 

6 header; each manifest item identifying a corresponding piece of the software 

7 product; each manifest item including at least one attribute; and 

8 a manifest digital signature stored with said manifest header; said 

9 manifest header, said header attributes, each of said plurality of items, and 
10 each said item attribute included in said manifest digital signature. 

1 2. A core product load manifest for protecting ongoing system 

2 integrity of a software product as recited in claim 1 wherein said at least one 

3 attribute of each manifest item includes a predefined attribute identifying the 

4 corresponding piece of the software product as signed or unsigned. 

1 3. A core product load manifest for protecting ongoing system 

2 integrity of a software product as recited in claim 2 wherein a digital 

3 signature of said signed corresponding piece of the software product is 

4 stored with said signed corresponding piece of the software product and said 

5 signature is excluded from said manifest item identifying said signed 

6 corresponding piece of the software product. 

1 4. A core product load manifest for protecting ongoing system 

2 integrity of a software product as recited in claim 3 wherein said signature of 

3 each signed corresponding piece of the software product and said manifest 

4 digital signature include a single certificate. 

1 5. A core product load manifest for protecting ongoing system 

2 integrity of a software product as recited in claim 1 wherein an amended 

3 manifest is generated for identifying added and deleted pieces of the 

4 software product. 
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1 6. A core product load manifest for protecting ongoing system 

2 integrity of a software product as recited in claim 5 wherein said amended 

3 manifest is chained to the core product load manifest. 

1 7. A method for protecting ongoing system integrity of a software 

2 product having a plurality of pieces; said method comprising the steps of: 

3 creating a product load manifest for the software product; said 

4 product load manifest including a manifest header with header attributes of 

5 the software product; a list of a plurality of manifest items; each manifest 

6 item identifying a corresponding piece of the software product; each 

7 manifest item including at least one attribute identifying the corresponding 

8 piece of the software product as signed or unsigned; and a manifest digital 

9 signature stored with said manifest header; said manifest header, said 

10 header attributes, each of said plurality of items, and each said item attribute 

1 1 included in said manifest digital signature; 

12 computing a digital signature of each signed piece of the software 

13 product; and 

14 storing each said computed digital signature with the signed piece of 

15 the software product and excluding each said computed digital signature 

16 from said product load manifest. 

1 8. A method for protecting ongoing system integrity of a software 

2 product as recited in claim 7 wherein the step of creating said product load 

3 manifest for the software product includes the step of receiving a certificate 

4 and copying said certificate into said manifest header. 

1 9. A method for protecting ongoing system integrity of a software 

2 product as recited in claim 8 wherein the step of computing said digital 

3 signature of each signed piece of the software product includes the step of 

4 utilizing said certificate and a private key for computing said digital signature 

5 of each signed piece of the software product. 

1 1 0. A method for protecting ongoing system integrity of a software 

2 product as recited in claim 7 further includes the step of creating an 

3 amended manifest for identifying added and deleted pieces of the software 

4 product. 
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1 1 1 . A method for protecting ongoing system integrity of a software 

2 product as recited in claim 10 includes the step of chaining said amended 

3 manifest to said product load manifest. 

1 12. A method for protecting ongoing system integrity of a software 

2 product as recited in claim 1 1 wherein the step of chaining said amended 

3 manifest to said product load manifest includes the step of including a 

4 pointer in said manifest header of said product load manifest to said 

5 amended manifest. 

1 13. A method for protecting ongoing system integrity of a software 

2 product as recited in claim 1 1 includes the step of creating a next amended 

3 manifest for identifying added and deleted pieces of the software product; 

4 and generating a single linked list for chaining said next amended manifest 

5 and said amended manifest to said product load manifest. 

1 14. A method for protecting ongoing system integrity of a software 

2 product as recited in claim 13 wherein the step of generating said single 

3 linked list for chaining said next amended manifest and said amended 

4 manifest to said product load manifest includes the step of providing a 

5 pointer in said manifest header of said product load manifest to said 

6 amended manifest and providing a pointer in a manifest header of said 

7 amended manifest to said next amended manifest. 

1 15. A method for protecting ongoing system integrity of a software 

2 product as recited in claim 7 wherein the step of creating said product load 

3 manifest for the software product includes the step of including a pattern 

4 attribute in said manifest header attributes of the software product. 
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1 1 6. A computer program product for implementing ongoing system 

2 integrity protection of a software product having a plurality of pieces; said 

3 computer program product including a plurality of computer executable 

4 instructions stored on a computer readable medium, wherein said 

5 instructions, when executed by a computer, cause the computer to perform 

6 the steps of: 

7 creating a product load manifest for the software product; said 

8 product load manifest including a manifest header; a list of a plurality of 

9 manifest items; each manifest item identifying the corresponding piece of the 

10 software product and including at least one attribute identifying the 

1 1 corresponding piece of the software product as signed or unsigned; and a 

12 manifest digital signature; said manifest header, each of said plurality of 

13 items, and each said item attribute included in said manifest digital 

14 signature; 

1 5 computing a digital signature of each signed piece of the software 

16 product; and 

17 storing each said computed digital signature with the signed piece of 

18 the software product and excluding each said computed digital signature 

19 from said product load manifest. 

1 1 7. A computer program product for implementing ongoing system 

2 integrity protection of a software product as recited in claim 16 wherein said 

3 instructions, when executed by a computer, further cause the computer to 

4 perform the steps of creating an amended manifest for identifying added and 

5 deleted pieces of the software product. 

1 1 8. A computer program product for implementing ongoing system 

2 integrity protection of a software product as recited in claim 16 wherein said 

3 instructions, when executed by a computer, further cause the computer to 

4 perform the steps of generating a single linked list for chaining said 

5 amended manifest to said product load manifest. 

1 1 9. A computer program product for implementing ongoing system 

2 integrity protection of a software product as recited in claim 16 wherein the 

3 step of creating said product load manifest for the software product includes 

4 the step of receiving a certificate and copying said certificate into said 

5 manifest header. 
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1 20. A computer program product for implementing ongoing system 

2 integrity protection of a software product as recited in claim 19 wherein the 

3 step of computing said digital signature of each signed piece of the software 

4 product includes the step of utilizing said certificate and a private key for 

5 computing said digital signature of each signed piece of the software 

6 product. 
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